program working in the background

[akva]

Hi couple of days now I have this problem, when I try to restart my computer I get the message that there is a program on the background that prevents to restart W7 and that must be forced restarted.How can I find that program?My task manager shows me nothing except a fairly big number of services.

 

[TrainableMan]

Very often the "program" that is running is Explorer which basically means it is your user interface. this is not an uncommon thing and is generally not a problem because there is an automatic timeout and the program is forced closed.

You might try running a malware scan to be sure some unknown program hasn't entered your setup. Try MalwareBytes Freeware edition.

You also might try Process Explorer instead of Task Manager but the process should be visible on either, as I said it's may be Explorer itself.

Links to both programs mentioned can be found in our Freeware DB, see the Anti-Malware & System Monitoring sections.

 

[Nibiru2012]

Also check your "Startup" folder in the All Programs section, something may be lurking in there too causing issues.

 

[akva]

Hi again, I've downloaded this program and started it but I really don't understand anything so I was wondering if you could tell me how can I post print screen here so someone can look at it.
And BTW I've tried Spyboot search and Destroy to update today but I got this message that its been running on 31 users in my network (I have just one computer) and my Internet traffic which is otherwise limited (250gb) per month has been spent after 18-20 days in a month (not just this month) and my mail' paswords are changed and I can't open them.Is it possible that I'm being "hacked'' or what ever is the word!
Please if you can help.

 

[yodap]

It sounds like you may have a problem. Have you tried Malwarebytes yet? Run a Quick scan and if it finds anything run a full scan in safe-mode.

To post a screen shot, click on the paperclip in the toolbar and browse to your picture and click upload. Close that window and click on preview post to make sure its there then submit.

 

[TrainableMan]

and my Internet traffic which is otherwise limited (250gb) per month has been spent after 18-20 days in a month (not just this month) and my mail' paswords are changed and I can't open them.Is it possible that I'm being "hacked'' or what ever is the word!

Yes it is very possible. You may have a virus/malware on your computer that is sending and receiving data, which could explain your high usage. It may also include a keylogger which could explain how they took over your email.

And once they have control of your email box they might be able to have your online bank password reset if they know your account. Also if you use your Credit cards online they may have captured that information as well.

I am not saying all this has happened but you should not wait to find out. If you use your computer for home banking I suggest you contact your bank and credit card companies to cancel and reissue your cards and start watching for odd charges/withdrawals. If you use eBay and Paypal you should contact them as well.

***

The program you are trying to load, is that the Malwarebytes program that I suggested? If you are infected, many viruses actively try to block malwarebytes installation.

Here is the forum tutorial on how to take a screenshot.

Then to post it here you hit the Go Advanced Button. Then click the Paperclip Icon and Browse for the JPG file you saved. Click Upload. Close that window once you've uploaded all the pictures. The pictures will automatically be added to the bottom of your post or you can position them by using the downward triangle to the right of the paperclip.

 

[akva]

This is my screen shot:

The first one is from the program for processes and the second one is when I started Spyboot search & Destroy.(BTW it wont update for some reason).
I scanned with it and "found" something which it erased, after that I immunize or what ever.
My Malwarebites scannes show me nothing and I'll do Kaspersky scan which I know wont find anything and it will take forever to finish.
To answer some of your questions fortunatle I don't use credit cards and have no money transfers but My computer is very slow and I have lost all my internet traffic in a middle of the month and if you knew that I live in third world country in Europa you'd knew that I have suffered substantial amount of money that I have to pay for my Internet subscription and these are things that I could think of top of my head God knows what else could happened that I'm not even aware of.
I guess my next questions would be how to stop all this would format help?

 

[TrainableMan]

The process explorer picture is too small and if I try to blow it up then it's blurry, so I can't read it. Spybot, I just don't know why you are getting that error.

Do you have a wireless network? Wireless networks can be used by others if left wide open or with weak encryption.

Do you use a cellular connection? Cellphones can be cloned and they can steal your minutes that way.

 

[akva]

I'll try once more but it would seem that your site is choosing the size of an attachment and this is the best I can do unless you want me to chop it in couple of peaces and upload it like that but I've checked my first upload and it is not that bad.
Please if you could try...Thanks a lot.

 

[TrainableMan]

I really don't see anything there that looks suspicious. Bunch of stuff running for your tablet, Kaspersky, spybot has several processes.

But malware can be very good at hiding. I see next to no CPU use (under 4%). I'm guessing you are also using Spybot's Tea-timer which I would never recommend doing. AntiMalware software is notorious for slowing down systems so having Kaspersky and spybot in there slows accesses even more. And don't set Malwarebytes to active (just run it manually sometimes) otherwise you will have even one more.

You might try downloading and running HijackThis and post those results.

You could also download and run RKill and see if it finds anything. RKill is near the bottom of the freeware DB under Virus Removal.

Do you use a paid version of Spybot S&D or is it the free version?

 

[akva]

I use manualy both Malwarebytes and Spyboot, I just let my Kaspersky active.Tell me how can I shake these things cause I'm 100% sure that someone's messing with me.I'll download all those virus removal programs and run them but what to do with my mails and places were I'm registered?

 

[TrainableMan]

Well if your mail is with your ISP you can call them.

If it is a windows live account go HERE

Gmail HERE

something else? go to their site and search on "my account was hacked"